package org.bouncycastle.jce.provider.test;
 
import java.io.ByteArrayInputStream;
import java.security.Security;
import java.security.cert.*;
import java.util.ArrayList;
import java.util.Calendar;
import java.util.HashSet;
import java.util.List;
import java.util.Set;

import org.bouncycastle.jce.X509Principal;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.util.test.SimpleTestResult;
import org.bouncycastle.util.test.Test;
import org.bouncycastle.util.test.TestResult;

public class CertPathBuilderTest
	implements Test
{

	public TestResult perform()
	{
		try
		{
			CertificateFactory cf = CertificateFactory.getInstance("X.509", "BC");

			    // initialise CertStore
			X509Certificate rootCert = (X509Certificate)cf.generateCertificate(new ByteArrayInputStream(CertPathTest.rootCertBin));
			X509Certificate interCert = (X509Certificate)cf.generateCertificate(new ByteArrayInputStream(CertPathTest.interCertBin));
			X509Certificate finalCert = (X509Certificate)cf.generateCertificate(new ByteArrayInputStream(CertPathTest.finalCertBin));
			X509CRL rootCrl = (X509CRL)cf.generateCRL(new ByteArrayInputStream(CertPathTest.rootCrlBin));
			X509CRL interCrl = (X509CRL)cf.generateCRL(new ByteArrayInputStream(CertPathTest.interCrlBin));
			List list = new ArrayList();
			list.add( rootCert );
			list.add( interCert );
			list.add( finalCert );
			list.add( rootCrl );
			list.add( interCrl );
			CollectionCertStoreParameters ccsp = new CollectionCertStoreParameters( list );
			CertStore store = CertStore.getInstance("Collection", ccsp );
			Calendar validDate = Calendar.getInstance();
			validDate.set(2002,2,21,2,21,10);

			    //Searching for rootCert by subjectDN without CRL
			Set trust = new HashSet();
			trust.add( new TrustAnchor( rootCert, null ) );

			CertPathBuilder cpb = CertPathBuilder.getInstance("PKIX","BC");
			X509CertSelector targetConstraints = new X509CertSelector();
			targetConstraints.setSubject(((X509Principal)rootCert.getSubjectDN()).getEncoded());
			PKIXBuilderParameters params = new PKIXBuilderParameters( trust, targetConstraints );
			params.addCertStore( store );
			params.setDate( validDate.getTime() );
			PKIXCertPathBuilderResult result = (PKIXCertPathBuilderResult) cpb.build(params);
		}
		catch (Exception e)
		{
		    e.printStackTrace();
			return new SimpleTestResult(false, this.getName() + ": exception - " + e.toString());
		}

		return new SimpleTestResult(true, this.getName() + ": Okay");
	}

	public String getName()
	{
		return "CertPathBuilder";
	}

	public static void main(
		String[] args)
	{
		Security.addProvider(new BouncyCastleProvider());

		Test			test = new CertPathBuilderTest();
		TestResult		result = test.perform();

		System.out.println(result.toString());
	}

}

